Aligning an information risk management approach to BS 7799-3:2005

This paper discusses the need and importance of information risk management in terms of business and organizational priorities. In the most basic sense, risk management is understanding and protecting those assets identified as most important to the business. Based on this, the reduction and ongoing management of identified risk can be addressed by business priority.